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Improvemen ts Relating to Information Storage 

* Technical Field 

The present invention concerns improvements relating to information storage and 
more particularly, though not exclusively to an information system in which the 
5 credentials of an entity can be securely stored and interrogated when access to services 
is to be provided. 

Background of the Present Inventinn 

Secure information storage is essential for any system which relies on the credibility 
of the information to work. For example, in a system where a person has credentials 
when enable him or her to access different types of information or services, a great 
deal of resources are devoted to ensuring that the integrity of the credentials is 
maintained. This has in the past involved centralised secure data storage which the 
credential issuing authorities can regulate and control. One such system is now 
described with reference to Figure 1 . 

15 A prior art system 10 for storing and providing access to a user's credentials (or 
jjermissions) comprises a central credential management and authorisation centre 12 
and a central database 14. The central database 14 stores information concerning all 
the users who are registered with the central credential management and authorisation 
centre 12. In the present illustration there are three users, Mr A, Mr B and Mr C. Each 

20 user has its own set of credentials which are stored at dedicated location sites 16, 18, 
20 within the central database 14. 

The central credential management and authorisation centre 12 and the central 
database 14 are owned by the credential issuing authority 22 which in this illustration 
is labelled CR1. The credential issuing authority 22 can maintain the security of the 
25 credentials it has issued because it controls their storage, updating, revocation and also 
proxying (when one credential is temporarily assigned to another user). 

The CR1 credential issuing authority 22 is connected in this illustration to the Internet 
24 (though in practice this could be an communications medium). This allows the 
users (Mr A Mr B and Mr C) to access the site from their respective web browsers 
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26,28, 30. Furthermore, an information site 32 can also access the credentials stored at 
the credential issuing authority 22 as is described below in the following example. 

_ _ When Mr A wishes to .access a service from the information site. 32 _via . his _web 

browser 26, Mr A requests the service and provides information which identifies his 
5 credential issuing authority 22. (Typically, this may be realised in credit card details 
being provided by Mr A to the information site which needs to check his credit limit 
from the credit card issuing authority.) The information site 32 then requests Mr A's 
credentials from the credential issuing authority 22. Mr A's credentials 16 are retrieved 
from the central database 14 by the central credential management and authorisation 

10 centre 12 and forwarded to the information site 32. If Mr A's credentials are sufficient 
to allow access the requested services, the information site 32 supplies them to Mr A. 

Supplying credentials in this way is secure and appears to be relatively straightforward 
for the single enquiry case. However, in practice the database 16 typically stores the 
credentials of hundreds of thousands of users. This gives rise to a problem that as the 
15 number of users increases, access time increases slowing down the operation of the 
system 10. This time delay is an inherent problem associated with a centrally provided 
resource but has been accepted up to now by users and authorities alike because of the 
ease with which the security issues of the credentials can be handled. 

Another difficulty is that the central database will need to update its information at 
regular intervals and, during this downtime, it is generally not possible for any third 
party to access information within the database 16, even if that information is itself 
not being updated. Also, if Mr A wishes to proxy some of his credentials to Mr B then 
Mr A can only make a request which will hopefully be actioned by the credential 
issuing authority 22 at its next update. The difficulty is that Mr A can only indirectly 
25 carry out the proxy because he is relying on the credential issuing authority 22 to make 
the necessary changes to his and Mr B's credentials 1 8 stored in the database 14. 

Furthermore, if Mr A wishes to assign his credentials to another person who is not 
registered with the credential issuing authority 22, but with another credential issuing 
authority 34 (CR 2) then this may simply not be possible as CR1 may consider such 
30 an external proxy to be a loss of control over their credentials. If it is possible, then the 
procedure for updating the other person can be very complicated and time consuming. 
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Also the revocation or updating of the credentials proxied to people registered with 
other authorities 34 becomes complicated and slow to implement. 



Objects and Summary of the Invention 

5 It is an object of the present invention to overcome or at least substantially reduce the 
above described problems. 

The present inventors have appreciated that as far as a computer is concerned, the 
user's actual name is not particularly important. What is important, however, is what 
the user is permitted to do. In this regard, the present invention resides in the 
10 appreciation that each entity can have their own personal identity and that this 
personal identity can be used as a store of the entity's credentials. In order to ensure 
the integrity of each personal identity and its associated credentials, security 
certificates are provided which can be used to verify the authenticity of the credentials 
and the owner of the credentials. 

15 As the identities are provided with security certificates, it is possible to store the 
identities and their credentials in a distributed manner. This overcomes the above 
described problems related to the inherent bottleneck associated with centralised 
systems. 

More specifically, according to one aspect of the present invention there is provided a 
20 distributed storage system for storing at least one credential, provided by an issuing 
authority and relating to an identity, the system comprising: at least one unique 
identity having a local store, the store of the at least one identity securely storing one 
or more credentials relating to the owner of the identity; and a security certificate 
provided at each identity for ensuring the authenticity of the one or more credentials, 
25 the security certificate providing a secure reference to the issuer of the one or more 
credentials that can be used in verifying the origin of each credential. 

The present invention enables user management of credentials in a much simpler, 
straightforward, faster and cost effective manner. Revocation of any credential can be 
carried out immediately by revoking the certificate which relates to the credential. 
30 Updating an entity's credentials is also easier and immediate with the issuer having 
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access to the identity's store by way of a robust security check. Proxying credentials 
also becomes faster and easier as it is controlled by the owners of the identities rather 
than a central maintenance authority. This direct control is one of the key advantages 
provided by the present invention." Also updating, revocation or proxying of any 
credential does not interfere with any other procedure relating to the identity of 
another entity because of the distributed nature of the system. 

Preferably each identity comprises a hierarchical structure comprising at least one 
role. The role is a subset of the identity which has its own credentials within the 
identity but is itself modelled as an identity. Accordingly, an entity's identity can 
advantageously provide different credentials to different enquirers depending on 
which role of the identity is being accessed. The provision of such roles is an aid to 
the management of the information stored within an identity. 

Each identity acts a local store of credentials for that entity but does not have to 
identify the name of its owner, thereby maintaining anonymity of the entity if desired. 
Also an entity can be a group of individuals whose members can all access the 
credentials of the entity as required. This is particularly useful for large groups of 
individuals representing an organisation where certain credentials are given to all 
employees. Also if roles are provided, special credentials for individuals within the 
group can also be stored within the hierarchical structure. 

An identity may contain a mailbox. Messages to the identity may be sent by other 
entities to the mailbox. The owner of the identity may access the contents of the 
mailbox once an authorisation function module arranged to check that a request for 
access to the mailbox has originated from an authorised identity has verified the 
owner knows the secret key. 

The identity may contain encrypted credentials which can be supplied to all enquirers 
but only authorised entities may be able to decrypt these credentials for their own use 
or verification by the use of public/private key encryption/decryption techniques. 
Again this allows selected provision of credentials to different enquirers as well as 
maintaining high levels of security regarding certain credentials. 

According to another aspect of the present invention, there is provided a method of 
storing credentials relating to identities provided by an issuing authority in a 
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distributed manner, the method comprising: securely storing one or more credentials 
relating to the owner of an identity in a local store of the identity; and providing a 
security certificate at the identity for ensuring the authenticity of the one or more 
credentials, the security certificate providing a secure reference to the issuer of the one 
5 or more credentials that can be used in verifying origin of each credential. 

According to a further aspect of the present invention, there is provided an identity of 
an entity for making available credentials belonging to the entity to other entities, the 
identity comprising: a local store arranged to securely hold one or more credentials 
relating to the entity; and a certificate processing module for reading and verifying 
10 received security certificates and creating security certificates for transmission, the 
security certificates providing a secure reference to the issuer of the one or more 
credentials that can be used in verifying the origin of each credential. 

The present invention also extends to a distributed storage system for storing a 
plurality of credentials, wherein the system comprises a plurality of identities as 
15 described above. 

Brief Description of the Drawings: 

Preferred embodiments of the present invention will now be described by way of 
example with reference to the accompanying drawings. In the drawings: 

Figure 1 is a schematic block diagram showing a conventional system for 
20 authenticating an owner's credentials to allow access to services; 

Figure 2 is a schematic block diagram of a website acting as a store of an owner's 
credentials according to a first embodiment of the present invention; 

Figure 3 is a schematic representation of a digitally signed authentication certificate 
issued to the owner's website by a Certification Authority according to the first 
25 embodiment of the present invention; 

Figure 4 is a schematic block diagram showing different entities connected via the 
Internet including the website of Figure 2 for authenticating an owner's credentials to 
allow access to services using the digitally signed certificate of Figure 3; 
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Figure 5 is a flow diagram illustrating the process of securely accessing information 
from the owner's website according to the first embodiment; . 

FigUrC 6 is a ? ow diagram illustrating the process of a Certification- Authority 

revoking or updating some credentials of the owner according to the first embodiment; 

5 Figure 7 is a flow diagram illustrating the process of an owner authorising a third 
party with some of its credentials by way of proxy according to the first embodiment 
of the present invention; 

Figure 8 is a schematic representation of a digital certificate issued by way of proxy to 
a second owner's website by a first owner according to the first embodiment of the 
10 present invention; and 

Figure 9 is a schematic block diagram of a website hosted by a security authority such 
as a bank, acting as a store of an owner's credentials according to a second 
embodiment of the present invention. 
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15 Detailed Description of the Preferred Emhnrf,Wnt s of the Prefer* invert™ 

Referring now to Figure 2, there is shown a storage structure 40 of a website used for 
implementing a new technique of distributed information storage according to the 
presently preferred embodiments of the present invention. The storage structure 40 is 
associated with a basic identity 42, which is pointed to by a pointer II . An identity can 
be considered to be a universal resource locator (URL) to a set of credentials and other 
owned identities (roles), i.e. the identity is an address of where the credentials (and 
other owned identities) can be found. 

The storage structure 40 stores several different types of information and is 
hierarchically arranged as a set of identities 44. The basic type of information stored in 
the storage structure 40 is a credential 46 (also referred to as a permission). A 
credential is a digitally signed document which has been signed using a private key of 
the issuer (the process of digitally signing a document is explained later). A credential 
46 determines what its owner (the owner of the identity) is permitted to do and hence 
sets out the credential details that will be required in use. Also each credential 
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contains a unique serial number, identifies to whom it has been issued and identifies 
an associated Certificate of Authentication. In practice, an owner goes through life 
collecting different credentials 46 and associated certificates and adding them to its 
storage structure 40. In the present embodiment, the owner has nine credentials (CI to 
5 C9). 

The credentials 46 are stored in the hierarchical structure 40 which is identity specific. 
The storage structure 40 contains three identities 44 (though any number can be used 
in practice). Each identity 44 has its own set of credentials 46 and is accessible via a 
pointer 48 (II, 12, 13). In the present embodiment, the two pointers 48 of subsidiary 

10 identities (12 and 13), namely identities 44 owned by the basic identity 42, are 
provided within the basic identity 42 (II). These two subsidiary identities (12 and 13) 
(also known as roles) are simply addresses of other collections of credentials which 
ultimately belong to the basic identity 42 such that a total set of credentials owned by 
the owner is the set of credentials owned directly or indirectly (via the subsidiary 

15 identities). 

The basic identity 42 has associated with it a secret private key 50 that is used by the 
owner of the identity to prove that the identity 42, and all of the credentials 46 and 
other information contained within it, belong to him or her. The way in which the 
owner does this is explained in detail later. 

In addition to the provision of credentials 46 and roles 48 within a given identity 42, 
44, the basic identity 42 contains the owner's public key 52. The public key 52 
corresponds to the owner's secret private key 50 and can be used to decrypt 
information encrypted by the secret private key 50. The secret private key 50 is unique 
to the owner and cannot be determined from analysis of the corresponding public key 
52. In practice, there are multiple copies of the owner's public key 52 and a copy is 
placed within each credential 46. Accordingly, when any credential 46 is supplied to 
an enquirer, the owner's public key 52 is also supplied automatically (usually in the 
form of an X.509 certificate). The owner of the identity 42 needs to use the public key 
52 to prove that they are entitled to use the identity 42 (described later). 

There are two types of credentials 46 shown in Figure 2, the standard credential 54 
and the encrypted credential 56. The standard credentials 54 (CI, C2, C4, C5, C6, C9) 
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provide information to an enquirer without any further security checks and generally 
concern information which the owner is happy to make publicly available. The 
encrypted credentials 56, in this embodiment C3, C7 and C8, concern information 
which me owner wishes to restrict access to. For 
5 storage structure 40 is a member of a secret organisation to whom he needs to prove 
his identity each time he accesses information regarding that organisation. However, 
in order to prevent any unauthorised person from determining that he is a member, the 
owner has his relevant credentials 46 encrypted and only the intended authorised 
recipient of the secret information will have the decryption key to decode the 
10 encrypted credentials 46, 56. 

Each of the credentials 46 which the owner has collected has been issued by a 
corresponding Certification Authority. In order to obtain such a credential 46, a 
request is made by the owner of the storage structure 40 to the Certification Authority, 
the request including the owner's public key 52. If the Certification Authority^ 
15 considers the owner to be acceptable, then the appropriate credential 46 is issued and 
certified as being issued from the Authority by the issuance of a Certificate of 
Authentication (not shown) identifying the owner of the storage area 40 and 
containing his public key 52. The purpose of the certification is that anyone can 
ultimately verify where the credential was validly issued. The Certification Authority 
20 also supplies any other certificates (not shown) which establish how the Certification 
Authority has been authorised itself. The Certification Authority encodes its digital 
signature for each issued credential 46 and, in order to read the signature, a public key 
is required at the storage structure 40. Accordingly, each credential 46 is provided 
with a public key 58, 60, 62 in the storage structure 40 which allows its signature to be 
25 decoded once it has been received from the Certification Authority. These public keys 
58, 60, 62 are obtained from the relevant Certificates of Authentication as is described 
later. 

As mentioned above, in order to prove that the credentials 46 were validly issued by a 
Certification Authority, each credential 46 has associated with it a Certificate of 
30 Authentication which has been digitally signed by the Certification Authority. Usually 
several credentials 46 are associated with a single certificate, though in the present 
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embodiment, each credential 46 (CI to C9) has its own certificate issued by a different 
Certification Authority (CAl to CA9). 

Referring now to Figure 3, a Certificate of Authentication 66 issued by Certification 
Authority CAl is shown. The certificate 66 sets out the following fields 66 specifying- 

5 a unique serial number 68 of the certificate (used in certificate revocation); the name 
of the current issuing authority 70, to whom 72 the certificate 66 was issued, a list 74 
of encrypted or non-encrypted credentials 46 granted by the Certification Authority 
CAl, a validity period 76 during which the certification will be valid and the public 
key 52 of the authorised bearer (Mr A). The serial number 68 and the name of the 

' issuing authority 70 are used as means of identification and are found in any 
credentials 46 issued by the Certification Authority. 

The Certificate of Authentication 66 also comprises a digital signature 78 which is 
created by the Certification Authority CAl. The purpose of the digital signature is to 
ensure that the digitally signed document was created by the issuer and to ensure that 
the contents cannot undetectably be altered. The signature 78 is generated by the 
Certification Authority CAl in a two-stage process. In the first stage, the contents of 
the certificate 66 are processed by a special hash algorithm which takes the entire 
contents of the certificate 66 and produces a very small fingerprint (typically only 20 
bytes in size) which represents the entire data. The special hash algorithm operates in 
such a way that it is computationally infeasible to find another document with the 
same fingerprint. This special hash algorithm is publicly available in order for checks 
to be made on the integrity of the data (credentials) within the certificate 66 as will be 
described later. In the second stage, the fingerprint is encrypted using the secret 
private key (not shown) of the Certification Authority CAl. The digital signature of 
each credential 46 is also generated in a similar manner by the issuer of a credential. 
Each identity (42, 44) extracts a relevant Certification Authority's public key 58, 60, 
62 which can be used to decode the digital signature 78 of the certificate 66. These' 
public keys 58, 60, 62 are provided within the credentials issued by each certification 
Authority for example or are generally available from the Certification Authority upon 
request. In the present embodiment, there are nine different Certification Authorities 
who have each issued a single credential 46 thereby giving rise to nine different 
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certificates (not shown). The storage structure 40 obtains nine different public keys 
58, 60, 62 which relate to the corresponding Certification Authorities (CA1 to CA9) 
in order to decode their respective certificates. 

Referring now to Figure 4, the way in which the storage structure 40 is accessed by 
third parties and is updated is now described by way of example. The storage structure 
40 is provided at Mr A's website 80. In this regard, it has a home page 82 which is 
generally accessible to all enquirers and provides public information about the identity 
of the owner. From the home page 82, other web pages, which make up the storage 
structure 40 and which store Mr A's credentials, are accessible. 

The website 80 is connectable to the world via the Internet 84 and, in particular, is 
correctable to each of the Certification Authorities 86 (CA1 to CA9). This is an on- 
line connection which enables any of the Certification Authorities 86 to update or 
revoke any of the credentials 46 they have given to Mr A at any time and this will be 
described in detail later. Also connected to the Internet 84 is a colleague of Mr A's 
called Mr B. Mr B also has a website 88 which has a storage structure similar to that 
of Mr A's. The way in which Mr A can authorise Mr B with some of the credentials 
that Mr A has in his possession (by way of proxy) will also be described later. 

In the present embodiment, Mr As website 80 has a mailbox 90 provided which can 
be used to store messages to the owner. Mr A can access the contents of the mailbox 
90 once an authorisation function 92 running in conjunction with the mailbox 90 has 
verified that the person claiming to be Mr A is the true owner. The authorisation 
function 92 does this by requiring Mr A to use this secret private key 50 such that use 
of Mr A's public key 52 at the website 80 can confirm Mr A's true identity. More 
specifically, the manner in which this verification is carried out is similar to a 
verification procedure carried out by an information site 94 as will be described later. 

The processes for supplying credentials updating/revoking credentials and proxying 
credentials, which are to be described below are controlled by a certificate processing 
module 98 provided at Mr A's website 80. 

Mr A's website 80 is used to provide credentials to an enquirer. An example of how 
this is achieved is now described with reference to an information site 94, which 
requires the information to verify Mr A's enquiry from a web browser 96. Referring to 
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Figaro 5, a flow diagram illustrating the process 100 of securely accessing information 
from the owner's website 80 commences at 102 with Mr A making a request for 
information from the information site 94. The request includes providing the 
information site with the address of Mr A's website 80 where his credentials 46 are 
5 stored. The request is signed at 104 by Mr A with digitally encoded information which 
identifies Mr A. This information is encrypted using Mr A's private key 50. 

The information site 94 upon receiving this request, goes at 106 to the website address 
provided, that of Mr A's, and requests Mr A's credentials 46 and any relevant 
certificates going back to the original issuers of the credentials. More specifically in 
» this embodiment, the request specifies that the credentials 46 and certificates relating 
to Mr A's 12 role 44 are required. Mr A's website 80 then responds by providing the 
requested credentials 46 (C4, C5, C6) and certificates, which are grouped together in 
the 12 role 44, to the information site 94. Also, Mr A's public key 52 is supplied as it is 
present within each credential 46. Optionally, the general credentials 46 (CI, C2 C3) 
provided in the basic identity 42 are also supplied together with their' relevant 
certificates. It is to be appreciated that in response to the present request, all the 
relevant credentials 46 are provided. However, in the case of specially encrypted 
identities, such as C3, the information site 94 will not be able to understand the 
encrypted data as it does not have an appropriate decryption key (a private key specific 
to these credentials). In other situations, the information site 94 may have the 
appropriate private key for decrypting the specially encrypted credentials 56. 

On receipt of the credentials 46 and the associated certificates, the information site 94 
extracts at 1 10 Mr A's public key 52 from the credentials 46 or any of the relevant 
certificates. The public key of each Certification Authority is also obtained at 110 The 
information site then checks at 112 the validity of each certificate received from Mr A 
Here it is to be appreciated that any certificates issued to CA1 from a further authority 
(FA) are also supplied and likewise any certificates to the further authority (FA) from 
a higher authority (HA). 

In order to check the validity, the information site 94 goes to a trusted authority, such 
as Verisign (in this embodiment this is the HA), of the authorities who's certificates 
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have been supplied. The HA's public key is available to the information site 94 as it is 
embedded in all browsers. 

HA's certificate to FA is verified to prove that the certificate was validly issued to FA 
using HA's public key. Now it is known that FA's certificate is OK, and so FA's public 
i key which was present in HA's certificate can be trusted. Then CAl's certificate from 
FA can be verified using FA's public key. Once CAl's certificate has been verified, 
then CAl's public key 58 can be trusted and can be used to likewise verify Mr A's 
certificate 66 issued by CAl . 

The actual checks that are carried out for each verification involve: 

1. Checking that the certificate has not been revoked. This typically 
involves going to a Certificate Revocation List provided by each Issuer; 

2. Digesting the contents of the certificate using the hash algorithm and 
then decrypting the supplied signature using the issuer's public key. The 
resulting digest (fingerprint) should match the one just generated; and 

3. Checking the validity period etc. of the certificate. 

All of ihe above is carried out in the checking step 1 12 of the process 100. The result 
of this is assessed at 1 14 and if there are any discrepancies in any of the certificates, 
then the process 100 ends at 1 16. Otherwise, the information site 94 uses at 1 18 Mr 
A's public key 52 to decode the signed part of the initial request from Mr A's browser 
92. The result of the decoding step is considered at 120. If the signed part is not 
correctly decoded with Mr A's public key 52, then Mr A is not permitted access the 
information site 94 and the process 100 of securely accessing information from the 
owner's website 80 is terminated at 1 16. Conversely, if the signature does decode with 
Mr A's public key 52, then this indicates that the original request has come from Mr A 
and so the process 100 is allowed to continue to the next stage. 

At the next stage, the information site 94 examines at 122 Mr A's credentials 46 to 
determine if Mr A can access requested information. The results of this check are 
considered at 124, and if the credentials 46 are sufficient, then the information site 94 
provides at 126 access to the requested information. If on the other hand, the 
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credentials 46 are not sufficient, then Mr A's request is rejected at 128 and Mr A is 
notified of this fact. Either way, the process then ends at 1 16. 

Referring now to Figure 6, a flow diagram illustrating the process 130 of a 
Certification Authority (CAl) revoking or updating some of Mr A's credentials 46 
5 which have been issued by that Certification Authority, is now described. The process' 
130 commences at 132 with there being a change in circumstances regarding Mr A's 
credentials 46. This change requires the updating or removal of some or all of Mr A's 
credentials and certificates issued by the Certification Authority, CAl in this 
embodiment. For example, the change may be that Mr A is no longer employed by the 
10 company which issued him with some of his credentials and so these now need to be 
revoked from Mr A's website 80. 

If removal is required at 134, then the certificates associated with the credentials 46 
that are to be removed are identified at 136. A Certificate of Revocation List (not 
shown) provided at CAl, is updated at 138 with the serial number 68 of the certificate 
15 66 to be revoked. 

Regardless of whether removal is required or not as determined at step 134, CAl 86 
now requests at 140 access to the storage structure 40 at Mr A's website 80, in order to 
delete, overwrite or update the credentials 46 issued by CAl 86 which now require 
change. CAl signs at 142 the request with digitally encoded information identifying 
20 CAl, using CAl's private key (not shown). 

On receipt of the signed request, Mr A's website 80 uses at 144 the CAl public key 
58, 60, 62, which it has in its possession, to decode the signed part of the request from 
CAl. The result of the decoding step is considered at 146. If the signed part is not 
correctly decoded with CAl's public key 58, then CAl is not permitted access to Mr 
25 A's website 80 and the update process 130 is terminated at 147. Conversely, if the 
signature does decode with CAl's public key 58, then this indicates that the credential 
46 was issued from CAl and so the process 130 is allowed access to the credentials 46 
to modify them in some way. 

More specifically, at 148, the website 80 allows those credentials 46 specified by CAl 
W to be updated or deleted. It is to be appreciated that the website 80 only permits those 
credentials which were issued by CAl to be accessed and so the credential 46 or group 
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of credentials 46 to be modified will usually be a subset of the credentials contained 
withm the storage structure 40. On completion of the modification, the process 130 



ends at 147. 



Whilst steps 144 and 146 have been shown as a single digital signature decoding and 
analysis step, this may in an alternative embodiment be as many steps as are required 
in order to establish the integrity of the instructing party. For example, Mr A's website 
80 may request CA1 to supply all its certificates which show that it has the authority 
to request the revocation. Each of these certificates can then be verified systematically 
as has been described previously until the authenticity of CAl's authority is 



10 established. 
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If at any stage an identity's website refuses to allow access to its site for the updating 
procedure, then the certificates verifying that site's credentials can be revoked by being 
placed on the Certificate Revocation List. 

Referring now to Figure 7, a flow diagram illustrating the process 150 of Mr A 
authorising a third party (Mr B in this instance) with some of its credentials 46 by way 
of proxy is now described. The process 150 starts with Mr A selecting at 152 
credentials 46 to be proxied, the duration of the proxy and the intended recipient (Mr 
B). The term proxy as used herein is to be understood to relate to the temporary 
assignment of credentials 46 to a third party for example as may be required when an 
authorised person is to go away on holiday and their deputy is to temporarily take 
charge of the authorised persons duties. 

Once the credentials 46 have been selected, Mr A creates at 154 its own Certificate of 
Authentication using all the selected information. The certificate is described in detail 
later with reference to Figure 8. Mr A then digitally signs at 156 the Certificate of 
Authority using Mr A's secret private key 50. Mr A sends at 158 the selected 
credentials 46 including his public encryption key 52, the Certificate of Authentication 
mcluding the encrypted digital signature, and any other certificates relating to the 
selected credentials to Mr B's website 88. 

At Mr B's website 88, Mr B uses at 160 the public key of a trusted source of at least 
one of the digitally signed certificates to verify the certificate and the public key of 
another Certification Authority. This is repeated in a similar manner as described 
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previously until Mr A's public key 52 is verified and can be used to decode the 
certificate to verify the authenticity of the source of the proxied credentials 46. If any 
of the certificates are not valid as determined at step 162, then the procedure 150 ends 
at 164. Otherwise the proxied credentials are considered to be useable at 166 and are 
stored for further use. At this stage, Mr B makes at 168 the extracted proxied 
credentials available at its website 88 together with his own public key which is now 
embedded into each proxied credential. The proxy procedure 150 then ends at 164. 

Once Mr B has validly received the proxied credentials, any third party wishing to 
check whether Mr B is authorised for a particular reason can access the Certificate of 
Authentication issued by Mr A which proves that Mr B is authorised. If the third party 
considers Mr B to be a reliable source of credentials, perhaps through past dealings 
with Mr B, then there is no need for any further authentication checks. If however, Mr 
B is unknown to the third party or is perhaps considered to be a risk, then as 
mentioned above, the third party goes through the process of iteratively checking each 
of the certificates in Mr B's website starting from decoding the trusted source's 
certificate and working down to Mr A's certificate. 

Turning now to Figure 8, a Certificate of Authentication 170 issued by Mr A to Mr B 
in order to proxy credentials is shown. The certificate 170 has a serial number which 
is used in revocation procedures. The certificate 170 also sets out who it was issued by 
174, to whom it was issued 176, describes at 178 all of the credentials 46 to which it 
relates, sets out at 180 its validity period and provides the public key 181 of Mr B. In 
addition, the certificate 170 comprises the digital signature 182 of the present issuer 
(Mr A). As mentioned before, the digital signature 182 is created by use of Mr A's 
secret private key 50. In this regard, the structure of the Certificate of Authentication 
1 70 is identical to the certificate 66 shown in Figure 3. 

Referring now to Figure 9, a second embodiment of the present invention is now 
described, the second embodiment is similar to the first embodiment and accordingly, 
the following description is restricted to only the differences between the two 
embodiments to avoid unnecessary repetition. 

The major difference between the first and second embodiments, is that rather than a 
separate website 80, 88 being provided for each storage structure 40, a single website 
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190 ,s provided that hosts a plurality of storage structures. More specifically, the host 
websne 190 belongs to a trusted organisation, which in this embodiment is a bank 
The website 190 has a home page 192 which provides general information about the 
host and allows access to the storage structures stored within the website 190 In this 
5 embodiment, three storage structures 194, 196, 198 are provided, one for each of three 
different identities (Mr A, Mr B, Mr C). The website 190 has a website management 
function 200 similar to that of the first embodiment which provides the necessary 
control of access to and communication from each of the storage structures 194, 196, 
198. 

10 The addresses of each of the storage structures 194, 196, 198 is given as the address of 
the host bank website 190 and includes some identifier for internal addressing within 
the website 190. Apart form this difference, the previously described methods of 
collectmg, updating, removing and proxying credentials 46 are the same in this 
embodiment. 

15 By providing several identity's storage structures 194, 196, 198 within a single website 
1 90 which ,s managed by a bank, it is possible for the bank to take some responsibility 
for the maintenance of those storage structures 194, 196, 198. In this way the 
authentication procedures can be simplified such that when the host bank's website 
190 ,s accessed, because it is a trusted site, there is no need to seek additional 

0 venfication by checking the previous issuers of the authentication certificates even 
when the identity is previously unknown to the enquirer, such as the information site 
94 requesting the credentials 46. 

It is to be appreciated that in the above described embodiments, the actual identity of 
the owner does not have to be made publicly available as it is not required at any place 
> m the storage structure 40. m this case, a label for the owner needs to be known and 
the permissions of that owner need to be accessible. This may be of particular use 
when me owner has a desire to retain his anonymity. 

In the above described embodiments, the storage structure for an identity can be 
owned by a group of individuals or objects and used as a shared identity. This is a way 
that user groups can have access to the same information from within a shared identity 
(storage structure). The only constraint in this version of the present invention is that 
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each object, or owner, must know the single secret private key of the identity. Clearly 
the greater the number of people that know the single private key the greater the 
potential there is for a breach of the integrity of the storage structure. 

The present invention is not restricted to a permanent on-line implementation as is 
provided for in the above-described embodiments which use a website. The present 
invention can be implemented in many different ways by many different systems. For 
example, it is possible for the present invention to be realised in the field of mobile 
telephony. The storage structure 40 can be provided, in this case, in a SIM card of a 
mobile phone for example. Here access to the storage structure 40 would be way of 
using the wireless telephony capabilities of the mobile phone. Also any updates or 
revocation could be provided as soon as the mobile phone is connected to its mobile 
telephone service provider. This can be considered to be a semi-permanent on-line 
link. 

Having described particular preferred embodiments of the present invention, it is to be 
appreciated that the embodiments in question are exemplary only and that variations 
and modifications such as will occur to those possessed of the appropriate knowledge 
and skills may be made without departure from the spirit and scope of the invention «. 
set forth in the appended claims. For example, whist the present embodiments have 
been described in relation to the Internet, other wide area networks, such as an intranet 
for example, can also be utilised as the communication network between the 
Certification Authorities and the identities. 
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Claims: 
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L A distributed storage system for storing at least one credential (46), provided 
by an issuing authority and relating to an identity (42, 44), the system comprising: 

at least one unique identity (42, 44) having a local store (40), the store (40) of 
the at least one identity (42, 44) securely storing one or more credentials (46) relating 
to the owner of the identity (42, 44); and 

a security certificate (66) provided at each identity (42, 44) for ensuring the 
authenticity of the one or more credentials (46), the security certificate (66) providing 
a secure reference to the issuer of the one or more credentials (46) that can be used in 
verifying the origin of each credential (46). 

2. A system according to Claim 1, wherein the at least one identity (42, 44) 
comprises a hierarchical structure. 

3. A system according to Claim 2, wherein the at least one identity (42, 44) 
comprises at least one role (48), the role (48) being a subset of the identity (42, 44) 

: , hayingits own credentials (46) within the identity (42, 44). 

20 4. A system according to any of Claims 1 to 3, further comprising a host site 
(190), the host site (190) having a plurality of identities (42, 44). and associated stores 
(194, 196, 198). 

5. A system according to Claim 4, wherein the host site (190) comprises a 
25 management module (200) for managing data access to and from the each of the 

identities (42, 44) and their associated stores ( 1 94, 196, 1 98). 

6. A system according to Claim 4 or 5, wherein the host site (190) comprises a 
trusted financial institution's website (190). 

30 

7- A system according to Claim 1 or 4, wherein the identity (42, 44) or host site 
(190) comprises a website (80, 190). 
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8. A system according to Claim 7, wherein the identity further comprises 
homepage (82) for providing general information regarding the identity (42, 44). 



5 9. A system according to Claim 1 , wherein the local store (40) of the identity (42, 
44) comprises a portable mobile device which is connectable to a telecommunications 
network (84). 

10. A system according to Claim 1, wherein the identity (42, 44) is arranged to 
10 store a private key (50) of the identity (42, 44) for encryption of the identity (42, 44). 

1 1. A system according to Claim 10, wherein the identity (42, 44) is arranged to 
store a public key (52) of the identity (42, 44) for decryption of the identity (42, 44). 

15_. . <JL. A system according to Claim 1 1, wherein the public key (52) of the identity 
(42, 44) is embedded within each credential (46) of the identity (42, 44). 

1 3. A system according to Claim 1 or 1 1 , wherein the identity (42, 44) is arranged 
to store a public key (58, 60, 62) of the authority (86) which has issued the one or 

20 more credentials (46) to the identity (42, 44). 

14. A system according to Claim 13, wherein the public keys (52, 58, 60, 62) for 
each of the at least one role (48) and the identity (42, 44) are stored in the appropriate 
store (40) or identity (42, 44). 

25 

15. A system according to Claim 1, wherein at least some of the credentials (46) 
are arranged to be encrypted. 

16. A system according to Claim 1 , wherein the one or more credentials (46) each 
30 refer to the corresponding security certificate (66). 

17. A system according to Claim 1, wherein the security certificate (66) comprises 
information describing the issuer (70), the identity to whom the certificate (66) has 
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been issued (72), a validity period (78) and a list (76) of credentials to which the 
certificate (66) relates. 



18. A system according to Claim 1, wherein the certificate (66) is digitally signed 
using a private key and the certificate (66) contains the public key (58) for reading the 
digital signature (78). 

19. A system according to Claim 1, wherein the identity further comprises a 
generator module (98, 200) for generating a certificate (66) regarding the identity (42, 
44) for use in proxying credentials (46) to the store (88) of a different identity (42, 
44). 

20. A system according to Claim 1 , wherein the identity (42, 44) further comprises 
a mailbox (90) for receiving messages from other identities (42, 44). 

21. A system according to Claim 20, wherein the identity further comprises an 
authorisation function module (92) arranged to check that a request for access to the 
mailbox (90) has originated from an authorised identity (42, 44). 

22. A method of storing credentials (46) relating to identities provided by an 
issuing authority in a distributed manner, the method comprising: 

securely storing one or more credentials (46) relating to the owner of an 
identity (42, 44) in a local store (40) of the identity (42, 44); and 

providing a security certificate (66) at the identity (42, 44) for ensuring the 
authenticity of the one or more credentials, the security certificate (66) providing a 
secure reference to the issuer of the one or more credentials (46) that can be used in 
verifying origin of each credential (46). 

23. An identity (42, 44) of an entity for making available credentials (46) 
belonging to the entity to other entities, the identity (42,44) comprising: 

a local store (40) arranged to securely hold one or more credentials (46) 
relating to the entity; and 
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a certificate processing module (98, 200) for reading and verifying received 
security certificates (66) and creating security certificates (170) for transmission, the 
security certificates (66, 170) providing a secure reference to the issuer of the one or 
more credentials (46) that can be used in verifying the origin of each credential (46). 

24. A distributed storage system for storing a plurality of credentials (46), the 
system comprising a plurality of identities according to Claim 24. 
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ABSTRACT 



Improvements Relating to Information Storage 

5 A distributed storage system for storing at least one credential (46), provided by an 
issuing authority and relating to an identity (42, 44), is described. The system 
comprises: a plurality of unique identities (42, 44) each having a local store (40). Each 
local store (40) securely stores credentials (46) relating to the owner of the identity 
(42, 44). The system also comprises one or more security certificates (66) provided at 
10 each identity (42, 44) for ensuring the authenticity of the credentials (46). The security 
certificates (66) provide secure references to the issuers of the credentials (46) and this 
can be used in verifying the origin of each credential (46). The identity can be 
provided a website or a mobile phone for example. 
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Encrypted Digital Signature of CA 1 



Serial Number: X23RG32986 

issued by: Certification Authority 1 

Issued to: Mr A 
Description of credentials: 



* Access to Accounts * 

* Level 4 Security Clearance 

* Overwrite Level 3 

Validity Period: 1 st May 2000 to 

1st July 2002 

Public Key of: Mr B 



CERTIFICATE 



* Access to Salaries 




Figure 3 
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Figure 4 



5/9 



Mr A requests information from Information 
site and supplies address of Mr A's Website. 
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Mr A signs request with encoded information 
identifying Mr A using Mr A's private key. 
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Information site goes to Mr A's website and 
reauests credentials. 
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Mr A's website supplies requested credentials, which 
include Mr A's public key, together with relevant 
certificates going back to original issuers. 
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Information site extracts Mr A's public key 
and obtains the public keys of each issuer of a 
certificate that is to be checked. 



Information site checks the validity of the 
Certificates received from Mr A. 
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Information site uses Mr A's public key to decode 
signed part of request from Mr A's browser. 
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Information site examines Mr A's credentials 
to determine if Mr A can access requested 
information 
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Provide Mr A access to 
information at site. 



Figure 5 
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END 



Reject request for access 
to information site and 
notify Mr A. 
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Change in circumstances regarding Mr A's 
credentials requiring updating or removal of 
some of Mr A's credentials issued by CA1 . 




Identify certificates associated with 
credentials to be removed. 
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Update a Certificate Revocation List provided 
at C A 1 with the serial number of the 
certificate to be revoked. 
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CA1 requests access to storage structure at Mr 
A's website to update or delete credentials. 
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CA1 signs request with encoded information 
identifying CA 1 using CA 1 's private key. ]/ 
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Mr A's website uses CA1 public key to 
decode signed part of request from CA1 . 
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Does signature decode with 
CAl's public key? 
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From the subset of credentials issued by CA1, 
the website allows those credentials specified 
by CA 1 to be updated or deleted 
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147 



END 
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Mr A selects credentials to be proxied, the 
duration of the proxy and the intended 
recipient (Mr B). 



Mr A creates a Certificate of Authority using 
the selected information. 



Mr A digitally signs the Certificate of Authority 
using its own private encryption key 
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Mr A sends selected credentials including Mr 
A's public key, the digitally signed certificate 
containing Mr B's public key and any other 
certificates relating to the selected credential 
to Mr B's website. 










At Mr B's website, Mr B decodes the digitally 
siened certificates. 







158 



160 





' 166 


The proxied credentials are useable. ^ 






Mr B makes the credentials available at its 
website together with Mr B's public key via 
Mr A's certificate or its credentials. 
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END - 164 
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Encrypted Digital Signature of Mr A 



CERTIFICATE 

Serial Number: X23RF00546 
Issued by: Mr A 

Issued to: Mr B 
Description of credentials: 

* Access to Salaries 

* Access to Accounts 

* Level 4 Security Clearance 

Validity Period: 21 st May 2001 to 

1st July 2002 

Public Key of: Mr B 
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